enclave_ocalls.h

/*
 * This is for enclave to make ocalls to untrusted runtime.
 */

#include <asm/stat.h>
#include <linux/poll.h>
#include <linux/socket.h>
#include <sys/types.h>

#include "linux_types.h"
#include "pal_linux.h"
#include "sgx_attest.h"

noreturn void ocall_exit(int exitcode, int is_exitgroup);

int ocall_mmap_untrusted(void** addrptr, size_t size, int prot, int flags, int fd, off_t offset);

int ocall_munmap_untrusted(const void* addr, size_t size);

int ocall_cpuid(unsigned int leaf, unsigned int subleaf, unsigned int values[4]);

int ocall_open(const char* pathname, int flags, unsigned short mode);

int ocall_close(int fd);

ssize_t ocall_read(int fd, void* buf, size_t count);

ssize_t ocall_write(int fd, const void* buf, size_t count);

ssize_t ocall_pread(int fd, void* buf, size_t count, off_t offset);

ssize_t ocall_pwrite(int fd, const void* buf, size_t count, off_t offset);

int ocall_fstat(int fd, struct stat* buf);

int ocall_fionread(int fd);

int ocall_fsetnonblock(int fd, int nonblocking);

int ocall_fchmod(int fd, unsigned short mode);

int ocall_fsync(int fd);

int ocall_ftruncate(int fd, uint64_t length);

int ocall_mkdir(const char* pathname, unsigned short mode);

int ocall_getdents(int fd, struct linux_dirent64* dirp, size_t size);

int ocall_listen(int domain, int type, int protocol, int ipv6_v6only, struct sockaddr* addr,
                 size_t* addrlen, struct sockopt* sockopt);

int ocall_accept(int sockfd, struct sockaddr* addr, size_t* addrlen, struct sockopt* opt);

int ocall_connect(int domain, int type, int protocol, int ipv6_v6only, const struct sockaddr* addr,
                  size_t addrlen, struct sockaddr* bind_addr, size_t* bind_addrlen,
                  struct sockopt* sockopt);

ssize_t ocall_recv(int sockfd, void* buf, size_t count, struct sockaddr* addr, size_t* addrlenptr,
                   void* control, size_t* controllenptr);

ssize_t ocall_send(int sockfd, const void* buf, size_t count, const struct sockaddr* addr,
                   size_t addrlen, void* control, size_t controllen);

int ocall_setsockopt(int sockfd, int level, int optname, const void* optval, size_t optlen);

int ocall_shutdown(int sockfd, int how);

int ocall_resume_thread(void* tcs);

int ocall_sched_setaffinity(void* tcs, size_t cpumask_size, void* cpu_mask);

int ocall_sched_getaffinity(void* tcs, size_t cpumask_size, void* cpu_mask);

int ocall_clone_thread(void);

int ocall_create_process(const char* uri, size_t nargs, const char** args, int* stream_fd,
                         unsigned int* pid);

int ocall_futex(uint32_t* uaddr, int op, int val, int64_t timeout_us);

int ocall_gettime(uint64_t* microsec);

int ocall_sleep(uint64_t* microsec);

int ocall_socketpair(int domain, int type, int protocol, int sockfds[2]);

int ocall_poll(struct pollfd* fds, size_t nfds, int64_t timeout_us);

int ocall_rename(const char* oldpath, const char* newpath);

int ocall_delete(const char* pathname);

int ocall_debug_map_add(const char* name, void* addr);

int ocall_debug_map_remove(void* addr);

int ocall_eventfd(unsigned int initval, int flags);

/*!
 * \brief Execute untrusted code in PAL to obtain a quote from the Quoting Enclave.
 *
 * The obtained quote is not validated in any way (i.e., this function does not check whether the
 * returned quote corresponds to this enclave or whether its contents make sense).
 *
 * \param[in]  spid       Software provider ID (SPID); if NULL then DCAP/ECDSA is used.
 * \param[in]  linkable   Quote type (linkable vs unlinkable); ignored if DCAP/ECDSA is used.
 * \param[in]  report     Enclave report to be sent to the Quoting Enclave.
 * \param[in]  nonce      16B nonce to be included in the quote for freshness; ignored if
 *                        DCAP/ECDSA is used.
 * \param[out] quote      Quote returned by the Quoting Enclave (allocated via malloc() in this
 *                        function; the caller gets the ownership of the quote).
 * \param[out] quote_len  Length of the quote returned by the Quoting Enclave.
 * \return                0 on success, negative Linux error code otherwise.
 */
int ocall_get_quote(const sgx_spid_t* spid, bool linkable, const sgx_report_t* report,
                    const sgx_quote_nonce_t* nonce, char** quote, size_t* quote_len);

int ocall_trim_epc_pages(void* addr, unsigned int nr_pages);

int ocall_notify_accept(void* addr, unsigned int nr_pages);